Dev data

Development runs against a disposable snapshot of the production database, and this surface moves data between the two. lift-from-dev replaces the live databases with the dev ones, whole databases at a time, auth tables included. It wipes whatever was on live, so it is a first-publish or pre-launch tool, not something to run against an app with real users. lift-from-live is the reverse and the safe direction: it pulls production down over dev so the sandbox mirrors prod, which is how a real bug gets reproduced against real data.

Both are destructive, all-or-nothing per database, and gated behind an explicit confirmation; lift-from-dev also requires the app id. lift-from-live takes a truncate flag too, which empties the dev databases in place without copying anything from live. Every lift writes an audit row, so the movement is on the record.